Publishing, Promoting, Sticky
- a user can
-- unpublish/publish
-- promote/demote
-- make sticky/remove sticky
nodes although he has no right to edit these types.
- The confirmation message is shown twice.

Delete
If the user tries to delete a node which he has no right to do so, this message is shown:

The items have been deleted.
You are not authorized to access this page.

and the node is fortunately still there.

Comments

dellis’s picture

dellis commented
Priority: Normal » Critical

This is definitely a big problem--I don't know if anyone is still maintaining this module, but users who shouldn't be able to publish/unpublish, etc can do so with the filter option here. Is there a way to route these actions through user permissions?